Petco Data Breach Lawsuit Investigation
On December 3, 2025, Petco disclosed a security incident involving one of its software applications that left certain customer files publicly accessible online. If you received a data breach letter from Petco, review the details below and consider your legal and identity-protection options.
Key Facts at a Glance
- Incident discovered: During a routine security review (date not specified).
- Breach made public: December 3, 2025 (California Attorney General filing).
- Root cause: A setting within a software application inadvertently allowed certain files to be accessible online.
- Information exposed: Petco’s review determined the files contained personal data specific to each recipient (exact data elements not listed in the notice).
- Company response: Corrected the application settings, removed the files from online access, implemented additional security controls, and offered complimentary credit and identity monitoring through Epiq.
What Happened?
Petco Animal Supplies Stores, Inc. (“Petco”) stated in its California notice that a misconfigured setting in one of its software applications unintentionally exposed certain files on the internet. The retailer discovered the issue internally during a security review and immediately removed the files from public access.
What Information Was Involved?
According to Petco’s review, the accessible files contained personal information relating to affected individuals. The specific data elements vary by person and were outlined in each notification letter.
How Petco Responded
- Corrected the application setting responsible for the exposure.
- Removed the files from online access.
- Added new security measures and technical controls to prevent similar issues.
- Offered impacted customers complimentary credit and identity monitoring services through Epiq.
Your Next Steps
- Enroll in the free monitoring. Follow the instructions in your letter to activate credit and identity monitoring from Epiq.
- Monitor financial accounts. Review bank, credit-card, and insurance statements for unfamiliar activity.
- Consider a fraud alert or credit freeze. These tools can make it harder for identity thieves to open new accounts in your name.
- Document your losses. Keep records of any out-of-pocket costs or time spent responding to the breach.
If you experience fraud or incur expenses, you may have legal rights to compensation. Use the form below to request a no-cost consultation.
Company Overview
Petco is a national pet-supply retailer headquartered in San Diego, California.
- Website: petco.com
- Headquarters: 10850 Via Frontera, San Diego, CA, USA
- Founded: 1965
- Industry: Retail
- Employees: 27,000
- Ticker: NASDAQ: WOOF
- Privacy Policy: petco.com/privacy-policy
- Contact Page: petco.com/contact-us
- Social: LinkedIn | X | Facebook | YouTube | Instagram
Frequently Asked Questions
I received a data breach letter from Petco — what should I do?
Read the letter carefully, enroll in the free credit and identity monitoring offered through Epiq, and keep copies of all correspondence. Monitor your accounts and consider additional protective measures such as a fraud alert.
How do I submit a claim related to the Petco data breach?
Complete the evaluation form on this page or consult a qualified attorney to discuss potential claims for reimbursement of expenses or time lost addressing the breach.
Am I eligible to join a lawsuit against Petco?
You may qualify if you received an official breach notice or suffered financial harm connected to the incident. Eligibility depends on factors such as residency, damages, and the nature of the exposed data.
What information did the Petco breach expose?
Petco’s investigation found that accessible files contained personal information specific to each affected individual. The company advised recipients of the exact data elements in their letters.
Did Petco offer credit monitoring, and for how long?
Yes. Petco is providing complimentary credit and identity monitoring through Epiq. The notification letter includes enrollment instructions and service details.
How many people were affected by the Petco breach?
Petco’s filing did not specify the total number of affected individuals. The California Attorney General notice confirms at least some California residents were impacted.
How can I get the official breach notice (PDF) for Petco?
You can download the California notice directly from the Attorney General’s website: Petco CA Breach Notice (PDF).